6个最好的WordPress安全插件来保护您的网站（已比较）

Recently one of our readers asked us which is the best WordPress security plugin? Using a WordPress security plugin protects your WordPress site from malware, brute force attacks, and hacking attempts. In this article, we have hand-picked the best WordPress security plugins that you can use to protect your website.

最近，我们的一位读者问我们哪个是最好的WordPress安全插件？ 使用WordPress安全插件可以保护您的WordPress网站免受恶意软件，暴力攻击和黑客攻击的侵害。 在本文中，我们精心挑选了可用于保护网站的最佳WordPress安全插件。

为什么要使用WordPress安全插件？ (Why Use a WordPress Security Plugin?)

There are around 18.5 Million websites infected with malware at any given time each week. An average website is attacked 44 times every day, which includes both WordPress and non-WordPress websites.

每周在任何给定时间，大约有1850万个网站感染了恶意软件。 一个普通的网站每天会遭到44次攻击，其中包括WordPress和非WordPress网站。

A security breach on your website can cause some serious damage to your business.

您网站上的安全漏洞可能会严重损害您的业务。

• Hackers can steal your data or the data belonging to your users and customers
  黑客可以窃取您的数据或属于您的用户和客户的数据
• A compromised website can be used to distribute malicious code to unsuspecting users and other websites.
  遭到破坏的网站可用于将恶意代码分发给毫无戒心的用户和其他网站。
• You can lose data, lose access to your website, get locked out, or your data could be held hostage
  您可能会丢失数据，无法访问您的网站，被锁定或将您的数据扣为人质
• SEO rankings and brand reputation.SEO排名和品牌声誉。

You can scan your WordPress site for security breaches at any time. However, cleaning a hacked WordPress site without professional help can be quite difficult for non-technical users.

您可以随时扫描WordPress网站是否存在安全漏洞。 但是，对于非技术用户来说，在没有专业帮助的情况下清理被黑的WordPress网站可能非常困难。

To avoid being hacked, you need to follow security best practices to protect your website. We have compiled them all in an easy to follow step by step WordPress security guide for beginners.

为了避免被黑客入侵，您需要遵循最佳安全实践来保护您的网站。 我们已经将它们全部编译为易于使用的WordPress初学者分步指南 。

One of the most important steps in securing your WordPress site is to start using a WordPress security plugin. These plugins help you harden WordPress security while also blocking brute force attacks on your website.

保护WordPress网站最重要的步骤之一就是开始使用WordPress安全插件。 这些插件可帮助您加强WordPress的安全性，同时还能阻止对您网站的暴力攻击 。

Let’s take a look at some of the best WordPress security plugins, and how they help you protect your website.

让我们来看看一些最好的WordPress安全插件，以及它们如何帮助您保护网站。

Note: You only need to use one plugin from this list. Having multiple plugins active from this list can lead to bugs.

注意：您只需要使用此列表中的一个插件。 从此列表中激活多个插件可能会导致错误。

1. Sucuri (1. Sucuri)

Sucuri is the industry leader in WordPress security. It is one of the best WordPress security plugins on the market. They offer a basic free Sucuri Security plugin which helps you harden WordPress security and scan your website for common threats.

Sucuri是WordPress安全领域的行业领导者。 它是市场上最好的WordPress安全插件之一。 他们提供了一个基本的免费Sucuri安全插件，可帮助您加强WordPress安全性并扫描您的网站以查找常见威胁。

But the real value is in the paid plans, which come with the best WordPress firewall protection. A firewall helps you block brute force and malicious attacks from accessing WordPress.

但是真正的价值在于付费计划，该计划带有最好的WordPress防火墙保护。 防火墙可帮助您阻止暴力破解和恶意攻击来访问WordPress。

Sucuri website firewall filters out bad traffic even before it reaches your server. They also serve static content from their own CDN servers.

Sucuri网站防火墙甚至在恶意流量到达您的服务器之前就将其过滤掉。 他们还从自己的CDN服务器提供静态内容。

Apart from security, their DNS level firewall with CDN gives you a tremendous performance boost and speeds up your website.

除安全性外，其带有CDN的DNS级防火墙还为您带来了巨大的性能提升并加速了您的网站。

Most importantly, they offer to clean up your WordPress site if it gets affected by malware at no additional cost. You can even take a website already affected by a malware, and they will clean it up for you.

最重要的是，如果您的WordPress网站受到恶意软件的感染，他们会免费提供清理服务。 您甚至可以访问已经受恶意软件影响的网站，它们会为您清理该网站。

We use Sucuri on all our websites. For more information, see our complete Sucuri review to learn how it helped us protect our websites.

我们在所有网站上都使用Sucuri。 有关更多信息，请参阅我们完整的Sucuri评论，以了解它如何帮助我们保护我们的网站。

2. Wordfence (2. Wordfence)

Wordfence is another popular WordPress security plugin. They offer a free version of their plugin which comes complete with a powerful malware scanner, exploit detection, and threat assessment features.

Wordfence是另一个流行的WordPress安全插件。 他们提供了其插件的免费版本，该版本随附功能强大的恶意软件扫描程序，漏洞利用检测和威胁评估功能。

The plugin will automatically scan your website for common threats, but you can also launch a full scan at any time. You will be alerted if any signs of a security breach are detected with the instructions to fix them.

该插件将自动扫描您的网站以查找常见威胁，但您也可以随时启动全面扫描。 如果发现任何安全漏洞迹象以及修复说明，则会提醒您。

Wordfence also comes with a built-in WordPress firewall. However, this firewall runs on your server just before loading WordPress. This makes it a little less effective than a DNS level firewall like Sucuri.

Wordfence还带有内置的WordPress防火墙。 但是，此防火墙仅在加载WordPress之前在您的服务器上运行。 这使其效率不如Sucuri这样的DNS级别防火墙。

For complete instructions, see our guide on how to install and setup Wordfence Security in WordPress.

有关完整的说明，请参阅有关如何在WordPress中安装和设置Wordfence Security的指南。

3. iThemes安全性 (3. iThemes Security)

iThemes Security is a WordPress security plugin from the folks behind the popular BackupBuddy plugin. Like all their products, iThemes Security offers a nice clean user interface with tons of options.

iThemes Security是一个WordPress安全插件，来自流行的BackupBuddy插件背后的人们。 像他们所有的产品一样， iThemes Security提供了一个漂亮而干净的用户界面，其中包含大量选项。

It comes with file integrity checks, security hardening, limit login attempts, strong password enforcement, 404 detections, brute force protection, and more.

它带有文件完整性检查，安全性增强，限制登录尝试，强力密码实施，404检测，暴力保护等。

iThemes Security does not include a website firewall. It also does not include its own malware scanner and uses Sucuri’s Sitecheck malware scanner.

iThemes Security不包括网站防火墙。 它还不包括自己的恶意软件扫描程序， 而是使用Sucuri的Sitecheck恶意软件扫描程序。

4.多合一可湿性粉剂安全性 (4. All In One WP Security)

All in One WordPress Security plugin is a powerful WordPress security auditing, monitoring, and firewall plugin. It enables you to easily apply basic WordPress security best practices on your website.

多合一WordPress安全插件是功能强大的WordPress安全审核，监视和防火墙插件。 它使您可以轻松地在网站上应用基本的WordPress安全最佳实践。

It comes with features like login lockdown to prevent brute force attacks, IP filtering, file integrity monitoring, user account monitoring, scan for suspicious patterns of database injection, and more.

它具有登录锁定功能(可防止暴力攻击)， IP过滤 ，文件完整性监视，用户帐户监视，扫描数据库注入的可疑模式等功能。

It also comes with a basic website level firewall which can detect some common patterns and block them for you. However, it is not very efficient and often you will be required to manually blacklist suspicious IPs.

它还带有基本的网站级防火墙，可以检测到某些常见模式并将其阻止。 但是，它不是很有效，经常需要您手动将可疑IP列入黑名单。

5.防恶意软件的安全性 (5. Anti-Malware Security)

Anti-Malware Security is another useful WordPress anti-malware and security plugin. The plugin comes with actively maintained definitions which help it find the most common threats.

反恶意软件安全性是另一个有用的WordPress反恶意软件和安全性插件。 该插件带有积极维护的定义，可帮助其查找最常见的威胁。

It’s malware scanner allows you to easily scan all files and folders on your WordPress site for malicious code, backdoors, malware, and other known patterns of malicious attacks.

它是恶意软件扫描程序，可让您轻松扫描WordPress网站上的所有文件和文件夹，以查找恶意代码， 后门程序 ，恶意软件和其他已知的恶意攻击方式。

The plugin requires you to create a free account on plugin’s website to access the latest definitions and also get some premium features like brute force prevention. The plugin also makes call to developers website to look for the updated definitions.

插件要求您在插件的网站上创建一个免费帐户，以访问最新定义，并获得一些高级功能，例如防止暴力破解。 该插件还可以调用开发人员网站以查找更新的定义。

While the plugin runs thorough tests, it often shows a large number of false positives. Matching each one of them with the source file is quite a lot of work.

插件运行全面测试时，通常会显示大量误报。 将每个文件与源文件进行匹配需要大量的工作。

6.防弹安全 (6. BulletProof Security)

BulletProof Security is not the prettiest WordPress security plugin on the market, but it is still useful with some great features. It comes with a setup wizard that helps you through plugin settings.

BulletProof Security不是市场上最漂亮的WordPress安全插件，但它在某些强大功能方面仍然很有用。 它带有一个安装向导，可以帮助您完成插件设置。

The settings panel also include links to extensive documentation to help you understand how the scans and security settings work. It comes with a malware scanner that allows you to check the integrity of WordPress files and folders.

设置面板还包含指向大量文档的链接，以帮助您了解扫描和安全设置的工作方式。 它带有一个恶意软件扫描程序，可让您检查WordPress文件和文件夹的完整性。

For security hardening, it includes login protection, idle session logout, security logs, and database backup utility. You can also set up email notifications with security logs and get alerts when a user is locked out.

为了加强安全性，它包括登录保护， 空闲会话注销 ，安全日志和数据库备份实用程序。 您还可以设置带有安全日志的电子邮件通知，并在用户被锁定时获得警报。

We hope this article helped you find the best WordPress security plugin for your website. You may also want to see our list of best WordPress backup plugins which will help you restore your website after a security breach.

我们希望本文能帮助您找到适合您网站的最佳WordPress安全插件。 您可能还希望查看我们的最佳WordPress备份插件列表，这些列表可帮助您在安全漏洞后恢复网站。

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

如果您喜欢这篇文章，请订阅我们的YouTube频道 WordPress视频教程。 您也可以在Twitter和Facebook上找到我们。

翻译自: https://www.wpbeginner.com/plugins/best-wordpress-security-plugins-compared/